{"id":3975495,"url":"https://alion.io/job/grassi-senior-network-engineer","title":"Senior Network Engineer","company":{"id":2121867,"name":"Grassi","domain":"grassiadvisors.com","url":"https://alion.io/company/grassiadvisors","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":60,"open_postings":39,"ghost_share":0.667,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Networking","role_family":"Networking","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"WhatsApp","optional":false}],"status":"live","first_seen_at":"2026-11-09T16:29:23Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T17:54:47Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Grassi\nAfter more than 40 years of business growth and industry change, Grassi has redefined what it means to be an advisor and accountant to today’s businesses and individuals. Nationally ranked as one of the largest and fastest-growing accounting firms in the nation, Grassi is a leading provider of advisory, tax, and accounting services across key sectors including construction, architecture and engineering, not-for-profit, healthcare, manufacturing and distribution, financial services, real estate, and more. Several publications have ranked us among the top accounting firms to work for, highlighting our strength in work-life balance, culture, and wellness categories.\nWith over 550 employees and eleven offices spanning the New York Metropolitan Area, Long Island, the Northeast, Florida, New England, Denver and an international presence in Italy, we are strategically positioned to serve clients locally and globally. In 2023, Grassi became an employee-owned company by implementing an ESOP, establishing our independence and empowering our people to drive the firm’s future success. The ESOP ensures that equity partners and all Grassi U.S. employees have the exclusive opportunity to own the firm’s stock, making them integral to the company’s future.\nAbout the Role\nWe are seeking a hands-on Senior Network Engineer to design, secure, maintain, and optimize enterprise networks and Microsoft Azure environments. This role combines deep Cisco networking and security expertise with intrusion prevention and broad Azure engineering experience, serving as a senior escalation resource for complex network, security, cloud, and hybrid infrastructure issues. Disciplined change management, clear communication, documentation, and sound business judgment are essential to reliable access to business-critical applications.\nThis U.S.-based position reports to work in Grassi’s Jericho, NY, Park Ridge, NJ, or New York, NY office. Occasional travel is required to support new-office buildouts and resolve issues at other offices.\nKey Responsibilities\nEngineer, secure, and maintain Cisco networking technologies across office, data center, and hybrid environments, including LAN, WAN, wireless, internet connectivity, routing, switching, segmentation, secure remote access, and high availability.\nTroubleshoot network and application connectivity, latency, packet loss, bandwidth, and wireless performance using packet captures, logs, and monitoring tools; lead root cause analysis and prevent recurring incidents.\nMaintain network security controls, firewall policies, secure management access, site-to-site and remote-access VPNs, certificates, and least-privilege connectivity. Review access regularly and validate approved changes.\nAdminister intrusion prevention systems: maintain policies, signatures, inspection settings, and approved exceptions; tune false positives; validate detection and blocking through authorized testing; and monitor sensor health, coverage, and performance.\nAnalyze network and intrusion events, integrate telemetry with centralized security monitoring, and coordinate investigation, containment, and remediation with security resources while preserving investigation records.\nDesign, deploy, administer, troubleshoot, optimize, and retire Azure resources across networking, compute, storage, application hosting, and hybrid connectivity. Maintain subscriptions, resource groups, governance, access controls, naming, tagging, and cost accountability.\nManage Azure virtual networks, routing, DNS, private and VPN connectivity, and on-premises integration; support virtual desktop environments, profiles, application delivery, capacity, and user experience.\nAdminister cloud and hybrid identity, role-based access, secure authentication, privileged access, and service identities. Maintain encryption, secrets, certificates, secure administration, and cloud security controls.\nMonitor network and Azure health, performance, capacity, availability, and spending; maintain diagnostics, alerts, and dashboards and recommend improvements that balance security, resilience, performance, and cost.\nMaintain backup, restoration, high availability, and disaster recovery arrangements; document recovery procedures and test restoration and failover. Coordinate application, database, and container workload dependencies with application and data owners.\nPlan and execute upgrades, migrations, patching, hardware replacement, and remediation using approved implementation, communication, validation, and rollback plans. Assess business risk and dependencies, particularly during tax and audit deadlines.\nRun, troubleshoot, and adapt approved scripts and automation for diagnostics, configuration checks, deployments, and maintenance. Use established infrastructure-as-code templates and automation standards to improve consistency, reduce repetitive work, and identify configuration drift; collaborate on advanced automation development as needed.\nMaintain diagrams, asset and configuration inventories, configuration backups, engineering standards, runbooks, and support documentation. Protect confidential information and support security assessments, audits, remediation, and recovery exercises.\nOwn engineering work and escalations through resolution and handoff; coordinate vendors, carriers, application owners, security teams, and IT leadership. Communicate business impact and recovery status clearly, escalate risks early, and mentor service desk and infrastructure colleagues.\nResearch unfamiliar issues using approved technical and vendor resources. Provide calm technical leadership during outages and peak periods, and participate in after-hours maintenance and critical incident response as needed.\nQualifications & Skills:\nRequiredAt least 5 years of progressive, hands-on experience spanning enterprise network engineering, network security, and Microsoft Azure, including ownership of complex production environments.\nCisco certification or another recognized networking certification is required.\nDemonstrated experience designing, maintaining, securing, and troubleshooting Cisco networking technologies, with strong networking fundamentals, secure connectivity, segmentation, high availability, and performance diagnostics.\nHands-on intrusion prevention experience, including policy configuration, signature updates, event investigation, false-positive tuning, and prevention-control validation.\nBroad Azure experience across architecture, networking, compute, storage, identity and access, security, governance, monitoring, automation, backup, disaster recovery, and cost optimization, including secure on-premises integration and cross-platform troubleshooting.\nDemonstrated root cause analysis, vendor escalation, and technical documentation skills; hands-on experience executing upgrades, migrations, and configuration remediation with validation and rollback plans, and testing backup restoration and disaster recovery procedures.\nPractical ability to run, troubleshoot, and adapt approved scripts or automation for routine network and Azure administration, including diagnostic collection, configuration checks, and repeatable maintenance tasks.\nStrong communication, collaboration, service ownership, and mentoring skills, with sound judgment about business impact and confidential information.\nAbility to report to work in the Jericho, Park Ridge, or NYC office, travel occasionally for new-office buildouts and troubleshooting at other offices, and participate in after-hours maintenance and critical incident response as needed.\n\nPreferredBachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent hands-on technical experience, military technical training, trade school, certifications, or comparable professional experience.\nRelevant Microsoft Azure certifications supported by recent hands-on engineering experience.\nAdvanced experience developing reusable PowerShell and Azure CLI automation, implementing infrastructure as code and configuration automation, and integrating centralized logging with network and cloud monitoring.\nExperience leading large-scale cloud migrations, network modernization, and remediation programs; coordinating security assessments and technical audits; and planning cross-functional business continuity and disaster recovery exercises.\nExperience supporting accounting, tax, audit, advisory, financial services, or another regulated, deadline-driven environment.\n\nWhy Grassi?\nOur firm is consistently ranked by Vault.com and the Best Places to Work group for our commitment to compensation, paid time off, work-life balance, culture and more. Some of the ways we accomplish this include:\nFlexibility: Our work-life balance initiatives include generous paid time off, flexible “Dress for Your Day” dress code, telecommuting options, flex-time policies, and summer hours, enhanced by our Floating Summer Friday’s program, which allows team members three extra Fridays off during the summer months in addition to their PTO.\nCompany Culture: Here at Grassi we are dedicated to creating an environment for our team members that is positive, productive, and aligns with our company’s high standards of inclusivity, diversity, and equity. We work closely with our DEI Council and Grassi Women’s Council to organize events throughout the year to bring the firm together for open dialogue and awareness of global diversity issues. Through our charitable initiative, Grassi Gives Back, we proudly support organizations such as Ronald McDonald House, Toys for Tots, Autism Speaks, Long Island Cares, and many of our nonprofit clients.\nBenefits Package: Competitive base compensation with eligibility for a raise and bonus each June or December based on performance metrics and level. Medical, Dental, and Vision Insurance, employer contribution to life insurance, 401(k) plan, ESOP, and client and employee referral bonus program.\nESOP Owned: The ESOP ensures that equity partners and all Grassi U.S. employees have the exclusive opportunity to own the firm’s stock, making them integral to the company’s future. Unlike many other ESOPs, Grassi’s is privately funded, with no outside investors or private equity firms involved in the plan.\nCPA Incentive: Financial assistance toward the achievement of the CPA certification which includes the cost of the CPA study materials, CPA exam registration and sitting fees for all 4 parts (up to 2 x per part), plus the CPA application and licensing fees. Paid study time during work hours, additional paid time off to take your scheduled exam and a bonus paid upon passing the CPA exam.\nLearning and Development: We offer Continuing Professional Education (CPE) opportunities, including both technical and soft skills training. These opportunities are available through internal courses and external programs led by well-known industry instructors, all at no cost to our employees.\nWellness Resources: Discounted gym memberships and various wellness initiatives and programs such as the CALM app that helps our team members lower stress, decrease anxiety, improve focus, and get more restful sleep.\nCompensation for this role is determined based on a combination of factors, including but not limited to your relevant experience, skills, certifications, and geographic location. We strive to offer competitive, equitable pay, that reflects the value each team member brings to the organization. In addition to base salary, we offer a comprehensive benefits package that includes performance-based incentives, wellness and retirement programs, and opportunities for continuous professional development.\nSalary ranges are provided to offer transparency and may vary depending on final candidate qualifications and local market conditions. Please find compensation information below for candidates residing in New York and New Jersey.\nNew York ranges are from $160,000 - $180,000\nNew Jersey ranges are from $160,000 - $...","description_format":"text","description_chars":12520,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Gym membership","Life insurance","Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"New Jersey","iso":null,"kind":"city"},{"name":"New York","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Professional Services","Accounting & Bookkeeping Services"],"lifecycle":[{"event":"open","at":"2026-11-09T17:54:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":1,"median_offered_wage_usd":92500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":58,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T19:48:32Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/grassi-senior-network-engineer","json_url":"https://alion.io/job/grassi-senior-network-engineer.json","meta":{"generated_at":"2026-11-09T19:48:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6118,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2121867},"rest":"https://alion.io/mcp/rest/get_company?id=2121867"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgrassi-senior-network-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgrassi-senior-network-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgrassi-senior-network-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/grassi-senior-network-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgrassi-senior-network-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3975495}},{"tool":"search_jobs","arguments":{"company":"grassiadvisors.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3975495},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}